Skip to content
OpenAdvisories

Archive

14 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /14 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.8
    CVE-2023-6702 Public exploit EPSS 44%

    Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap cor…

    Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  • High 7.5
    CVE-2023-6595 Public exploit

    WhatsUp Gold Unauthenticated Access to an API Endpoint

    In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate ancillary credential information stored within WhatsUp Gold.

    Progress Software WhatsUp Gold
  • High 7.4
    CVE-2023-45185 Public exploit

    IBM i Access Client Solutions code execution

    IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote code. Due to improper authority checks the attacker could perform operations on the PC under the user's authority. IBM X-Force ID: 268273.

    IBM i Access Client Solutions
  • High 7.4
    CVE-2023-45182 Public exploit

    IBM i Access Client Solutions information disclosure

    IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 is vulnerable to having its key for an encrypted password decoded. By somehow gaining access to the encrypted password, a local attacker could exploit this vulnerability to obtain t…

    IBM i Access Client Solutions
  • Critical 9.6
    CVE-2023-6572 Public exploit

    Command Injection in gradio-app/gradio

    Command Injection in GitHub repository gradio-app/gradio prior to main.

    gradio-app gradio-app/gradio gradio PyPI
  • Medium 6.2
    CVE-2023-45184 Public exploit

    IBM i Access Client Solutions

    IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to obtain a decryption key due to improper authority checks. IBM X-Force ID: 268270.

    IBM i Access Client Solutions
  • High 8.8
    CVE-2023-50564 Public exploit EPSS 29%

    An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers …

  • Unscored —
    CVE-2023-31546 Public exploit EPSS 49%

    Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search featur…

  • Unscored —
    CVE-2023-48084 Public exploit Scanner template EPSS 34%

    Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.